Marginalia — Cuaderno Interactivo Marginalia Iacr2025

> PUBLICACIÓNIACR Transactions on Cryptographic Hardware and Embedded Systems (2025)

REFERENCIA DOI

Side-Channel Attacks target the recovery of key material in cryptographic implementations by measuring physical quantities such as power consumption during the execution of a program. Simple Power Attacks consist in deducing secret information from a trace using a single or a few samples, as opposed to differential attacks which require many traces. Software cryptographic implementations usually contain a data-independent execution path, but often do not consider variations in power consumption associated to data. In this work, we show that a technique commonly used to select a value from different possible values in a control-independant way leads to significant power differences depending on the value selected. This difference is actually so important that a single sample can be considered for attacking one condition, and no training on other traces is required. We exploit this finding to propose a single-trace attack without any knowledge gained on previous executions, using trace folding. We target the two modular exponentiation implementations in Libgcrypt, getting respectively 100\% and 99.998\% correct bits in average on 30 executions using 2,048-bit exponents. We also use this technique to attack the scalar multiplication in ECDSA, successfully recovering all secret nonces on 1,000 executions. Finally, the insights we gained from this work allow us to show that a proposed countermeasure from the literature for performing the safe loading of precomputed operands in the context of windowed implementations can be attacked as well.

VER ABSTRACT

[ + ]

> NAVEGACIÓN

https://emanuel_quintana.codeberg.page/Marginalia/ LIVE

Índice General

Marginalia / Lecturas en curso LIVE

Índice de Leyendo

> REPOSITORIO

README.mdPREVIEW

Marginalia

Sitio en vivo: codeberg.page/Marginalia

Marginalia: notas escritas al margen de un libro.

Catálogo, notas, ensayos y código de lectura — economía, matemática, ciencias de la computación, literatura, física e ingeniería, y más.

Español

Este repositorio es mi cuaderno de lectura público, usando Org-mode y org-babel.

Licencias

Este repositorio usa doble licencia: código bajo MIT, notas y ensayos bajo CC BY-SA 4.0.

Ver en Codeberg

> LICENCIAS

LICENSEMIT PREVIEW

MIT License

Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files, to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED.

NOTE: Aplica solo al código fuente. El contenido escrito está bajo CC BY-SA 4.0.

Código — MIT

LICENSE-CONTENT.mdPREVIEW

Licencia de contenido

Este archivo cubre las notas de lectura, ensayos y textos en lecturas/ y ensayos/.

Creative Commons BY-SA 4.0

Sos libre de:

Compartir — copiar y redistribuir el material.
Adaptar — remezclar, transformar y construir a partir del material.

Bajo los siguientes términos: Atribución y ShareAlike.

CC BY-SA 4.0

Marginalia — Emanuel Quintana Silva Última actualización: 2026-07-22

Validate